• info
• discussion
• exploit
• solution
• references

Serendipity Freetag-plugin 'style' parameter Cross Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

http://www.example.com/plugin/tag/%3Cdiv%20style=[XSS]